103,766 indexed

CVECVE vulnerabilities

103,766 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.

Showing 8,451–8,500 of 103,766 · page 170 of 2076

IDTitleSummary
CVE-2026-85870CVE-2026-85870
CVSS 7.0
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-8587CVE-2026-8587
CVSS 8.8
Use after free in Extensions in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convinced a user to install a malicious extension to execu…
CVE-2026-85869CVE-2026-85869
CVSS 7.8
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-85868CVE-2026-85868
CVSS 7.0
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85867CVE-2026-85867
CVSS 7.8
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-85866CVE-2026-85866
CVSS 4.7
Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally.
CVE-2026-85865CVE-2026-85865
CVSS 5.5
Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.
CVE-2026-85864CVE-2026-85864
CVSS 7.8
Improper privilege management in Python allows an authorized attacker to elevate privileges locally.
CVE-2026-85863CVE-2026-85863
CVSS 7.8
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85861CVE-2026-85861
CVSS 7.8
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85860CVE-2026-85860
CVSS 7.8
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-85859CVE-2026-85859
CVSS 6.5
Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.
CVE-2026-85858CVE-2026-85858
CVSS 7.8
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-85857CVE-2026-85857
CVSS 5.5
Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
CVE-2026-85856CVE-2026-85856
CVSS 7.1
Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.
CVE-2026-85855CVE-2026-85855
CVSS 7.0
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-85854CVE-2026-85854
CVSS 7.0
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-85853CVE-2026-85853
CVSS 7.0
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-85852CVE-2026-85852
CVSS 5.5
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
CVE-2026-85851CVE-2026-85851
CVSS 7.8
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.
CVE-2026-85850CVE-2026-85850
CVSS 7.8
Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-85849CVE-2026-85849
CVSS 7.8
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85848CVE-2026-85848
CVSS 7.8
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
CVE-2026-85847CVE-2026-85847
CVSS 6.5
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
CVE-2026-85846CVE-2026-85846
CVSS 7.0
Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-85843CVE-2026-85843
CVSS 7.8
Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
CVE-2026-85842CVE-2026-85842
CVSS 7.8
Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVE-2026-85841CVE-2026-85841
CVSS 6.6
Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.
CVE-2026-85840CVE-2026-85840
CVSS 6.5
Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.
CVE-2026-85837CVE-2026-85837
CVSS 7.8
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-85836CVE-2026-85836
CVSS 7.8
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-85835CVE-2026-85835
CVSS 5.5
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.
CVE-2026-85834CVE-2026-85834
CVSS 7.0
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-85833CVE-2026-85833
CVSS 7.8
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-85832CVE-2026-85832
CVSS 7.8
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
CVE-2026-85831CVE-2026-85831
CVSS 5.5
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.
CVE-2026-85830CVE-2026-85830
CVSS 5.5
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
CVE-2026-85829CVE-2026-85829
CVSS 7.8
Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
CVE-2026-85828CVE-2026-85828
CVSS 7.0
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
CVE-2026-85827CVE-2026-85827
CVSS 7.0
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
CVE-2026-85826CVE-2026-85826
CVSS 7.0
Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-85825CVE-2026-85825
CVSS 7.0
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-85824CVE-2026-85824
CVSS 7.0
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
CVE-2026-85823CVE-2026-85823
CVSS 7.0
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
CVE-2026-85822CVE-2026-85822
CVSS 7.8
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
CVE-2026-85821CVE-2026-85821
CVSS 6.5
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
CVE-2026-85820CVE-2026-85820
CVSS 7.8
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-85818CVE-2026-85818
CVSS 9.0
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-85817CVE-2026-85817
CVSS 8.8
Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.
CVE-2026-85816CVE-2026-85816
CVSS 5.7
Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.
Sourced from NVD + CISA KEV + FIRST EPSS. Curated by Adam Lundqvist, Founder at SQUR.